25 lines
670 B
Nix
25 lines
670 B
Nix
|
{
|
||
|
|
config,
|
||
|
|
...
|
||
|
|
}:{
|
||
|
|
sops.defaultSopsFile = ../secrets/common.yaml;
|
||
|
|
sops.age.keyFile = "/var/lib/sops-nix/age-key.txt"; #opt/nixflake/secrets/age-key.txt;
|
||
|
|
sops.age.generateKey = true;
|
||
|
|
|
||
|
|
sops.secrets.wifi = {};
|
||
|
|
|
||
|
|
sops.secrets."${config.hostcfg.hostname}_ssh_priv" = {
|
||
|
|
mode = "0400";
|
||
|
|
owner = config.users.users.sora.name;
|
||
|
|
group = config.users.users.sora.group;
|
||
|
|
};
|
||
|
|
sops.secrets."${config.hostcfg.hostname}_ssh_pub" = {
|
||
|
|
mode = "0400";
|
||
|
|
owner = config.users.users.sora.name;
|
||
|
|
group = config.users.users.sora.group;
|
||
|
|
};
|
||
|
|
sops.secrets."${config.hostcfg.hostname}_wg_priv" = {};
|
||
|
|
sops.secrets."${config.hostcfg.hostname}_wg_pub" = {};
|
||
|
|
|
||
|
|
}
|